Digital Certificates

Digital certificates are electronic files that regulate and authenticate the online exchange of information. They provide this service in two significant ways. First, digital certificates validate that the parties involved in the exchange are actually who they claim to be. Digital certificates also protect any data submitted by these parties from being tampered with or viewed once sent online.

In the age of cyber-crime, digital certificates are the user's first line of defense. This is especially important when it comes to online shopping, as it prevents sensitive information, such as credit card and bank account numbers, from being intercepted by cyber-criminals. Digital certificates also protect websites themselves, by vouching for the identity of the user.

By installing a pair of interlocking "keys" on your computer, digital certificates protect the identity of the user, as well as any sensitive information being sent. The pair of keys installed on the computer ("public key" and "private key") encrypt and decrypt information as it is transmitted online. Like digital fingerprints, no two pairs of keys are alike, enabling users to be uniquely identified.

Digital Certificates and Encrypted Data

When someone wants to exchange information online with you, their computer accesses your digital certificate, which automates the process of distributing your public key. The other computer then uses the public key to confirm your identity (or the identity of your company), and then encrypts the information before sending it to your computer. The information can only be decrypted by the unique private key installed on your computer.

A digital certificate will issue a public key to anyone who wants to exchange information with your computer. Your private key remains on your computer only, and acts as your digital signature. In order for the interaction to be secure, the public key must match the private key.

This encryption process protects the information from being accessed, intercepted, or altered by an outside party. It also protects web servers from being accessed by unauthorized parties, who may sabotage the site itself, or steal confidential information.

Distribution of Digital Certificates

Digital certificates are issued by a trusted third party, known as a certification authority. The certification authority attests to the validity of the information provided by the certificate holder. Certificate holders can include individual web-surfers, corporations, websites, and network routers. Once the digital certificates have been issued, they are used to protect the data as it is exchanged.